OT SOC Analyst – Incident Response & Threat Hunting

Morson Edge; Pulborough; Hybrid; GBP 60,000 - 85,000; Full time

Job summary

A leading technology service provider in the UK is seeking an experienced OT SOC Analyst to handle high-severity cyber security incidents. You will analyze threats, create SOC policies, lead incident response, and enhance security monitoring. The ideal candidate has extensive experience in leadership roles within critical environments. This position offers a hybrid work model with 2 days on-site in Crawley.

Responsibilities

• Analyze intel and IOCs to find threats across environments.
• Create SOC policies and procedures aligned with best practice.
• Ensure all logs feed into the SIEM and detect anomalous activity.
• Lead high-severity incidents, improving playbooks and manage remediation.
• Develop automated workflows to streamline response.
• Perform forensic analysis and recommend containment actions.
• Participate in cyber-attack simulations to strengthen resilience.
• Improve reporting dashboards and key security metrics.
• Support and maintain security tools and platforms.
• Support audits and ensure compliance.
• Automate and enhance detection and response.

Skills

End to End Cyber Incident Leadership Experience

SOC L3 / CSIRT L3 Experience

CNI / Defence / Business Critical Environment Experience

Threat Hunting Experience

Threat Hunting Strategy Mindset

Runbook & Playbook Authoring

Lessons Learned / Root Cause Analysis Leadership

Experience working with security monitoring tooling

Extensive IT/OT Systems Experience

Extensive CNI & OT Environment Awareness

Education

Cyber and OT Certification

Job description

A leading technology service provider in the UK is seeking an experienced OT SOC Analyst to handle high-severity cyber security incidents. You will analyze threats, create SOC policies, lead incident response, and enhance security monitoring. The ideal candidate has extensive experience in leadership roles within critical environments. This position offers a hybrid work model with 2 days on-site in Crawley.